Privacy notice

Who we are

[Company name] (company number [number], registered office [address]) is the controller for Fixture and Fixture Pro, except for the customer records trades keep in Fixture Pro, where the trade is the controller and we are its processor. Contact: [support email]. [Data protection contact, if appointed.] We are registered with the ICO: [registration number].

What we collect

• Account: your name, email, password (stored hashed by our authentication provider), sign-in records (the time, and a keyed hash of your IP address and your browser family — never the IP itself), and your terms acceptance.
• Your home’s records: what you add — rooms, items, photos, documents, reminders, shopping, energy readings (if you connect your supplier), vehicles (registration, MOT and tax details from official sources if you use lookups), regular help, trades, bookings, projects and savings records.
• Sharing: who you share a home with, their roles and what each can see, and a log of changes.
• Trades (Fixture Pro): your business details, listing, services, prices, areas, badges and evidence, customers, schedule, payments and expenses.
• Reviews: the review, your first name and outward postcode as shown publicly, and integrity signals (a keyed hash of the IP address and browser family) kept for 12 months.
• Directory visitors and searches: searches are logged without any user or property id and kept for 24 months; ‘tell me when a trade joins’ requests keep your email until we tell you or 24 months.
• Payments: Stripe handles card details; we keep your Stripe customer id, plan, invoices and payment status.
• Support and errors: error reports (scrubbed of tokens and personal details) for 90 days, an email log (masked addresses) for 12 months, and records of support access for 12 months.
• The iPhone app: a push token for each iPhone you allow notifications on, with the app’s version, deleted when you sign out on that iPhone or delete your account. A notification on your lock screen shows a short title only — never an amount, an address, your home’s name or anyone’s contact details. The app keeps your sign-in in the iPhone’s Keychain and what you last viewed on the phone, until you sign out. It doesn’t use your location, advertising identifiers, analytics or tracking.
• The Fixture Pro iPhone app: the same account as the web, and the same push token record (marked as the Fixture Pro app). A Fixture Pro notification on a lock screen says only what kind of thing happened — “New request from a customer”, “Payment to confirm” — never a name, an amount, an address or a note. With no signal, the changes you make on a doorstep (a visit done or skipped, an extra, a payment taken, photos, an expense) wait on the phone in a protected file until they’re sent, and the access notes for today’s and tomorrow’s visits are kept on the phone the same way — cleared at midnight, when a customer stops sharing, and when you sign out. It doesn’t use your location, advertising identifiers, analytics or tracking.

Why, and our lawful basis

• To provide the service you asked for — contract.
• To keep the service secure, prevent fraud and fake reviews, and fix problems — our legitimate interests in running a safe, trustworthy service (reviews: we must take reasonable steps against fake reviews).
• To send service emails (reminders you chose, booking and repair notices, security emails) — contract and legitimate interests. We don’t send marketing without consent.
• To meet legal duties (tax and payment records, responding to lawful requests) — legal obligation.
• Photo recognition, if you use it — contract; the image only, sent to our AI provider to suggest items.
• Reading documents you add, when the feature is on — contract; the document’s text (or images of its first pages) may be read by our AI provider to suggest its title, type, dates and what it’s for. Your other records, items and contacts are never sent; suggestions are only saved when you confirm them.

Who sees what

• People you share a home with see what you allowed them to see, area by area, including whether they see costs and values.
• If you rent: your landlord and letting agent never see your household’s records; you see the building’s curated view only.
• A trade you book or connect with sees your name, the job and only the details you choose to share (your address once you agree a date); a trade found in the directory sees your first name, town and outward postcode until they confirm.
• Public: a trade’s listing, and a review’s first name and outward postcode — never an address, phone number or email.
• Our processors: Supabase (database, sign-in, files), Vercel (hosting), Resend (email), Stripe (payments; Stripe Identity for ID checks if used), Anthropic (photo recognition and reading documents, when on), Expo and Apple (delivering notifications to iPhones — the title only), [identity provider]. Some may process data outside the UK under UK adequacy regulations or the UK International Data Transfer Agreement.
• Our support staff see account metadata, not the contents of your home, unless you agree to a time-limited, read-only view; every admin action is logged.

How long we keep it

• Your records: while your account is open. When you delete your account they are deleted, except what others you shared with hold of their own.
• A home support has deleted on request is removed for good after 30 days.
• Former household members can still read and export their household’s records after a tenancy ends.
• Logs: errors 90 days; sign-in records 90 days; email log, support access and review signals 12 months; directory search log 24 months; admin actions, organisation audit and the access change log 6 years; payment records as long as tax law requires.
• Verification evidence: until a badge expires or is replaced, then removed (12 months after it lapses at most).

Your rights

You can access, correct, export, restrict, object to and delete your data. Delete your account from your Account page, or email us. You can complain to the Information Commissioner’s Office (ico.org.uk), though we’d like the chance to help first.

Download your data (Account → Download your data) gives you a copy at any time, free: choose Everything, or the homes and areas you want, as a readable document, a spreadsheet, or a complete archive with every record you can see (as CSV and JSON) and all your photos and files. It only ever contains what you can see in the app. We email you when it’s ready, it’s available for 7 days, and we tell you whenever one is requested.

Cookies

We use only the cookies and browser storage the service needs, and no analytics or advertising trackers. The cookie notice lists every one.

Changes

We’ll update this notice when what we do changes, and tell you about significant changes.